https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:15:01.615457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elk-2026-72659 BIT-elk-2026-72659 — Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 2026-10-03T09:15:01.687795+00:00

Affected: Bitnami: elk

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding only low-privileged access is not correctly validated before use. Processing the request causes unbounded memory growth in the Kibana process, which is terminated by the host once available memory is exhausted. Kibana then becomes unavailable to all users until the service is restarted.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-03T09:15:01.687884+00:00 certfr-2026-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-352340 EUVD-2026-352340 2026-10-03T09:15:01.687921+00:00 EUVD-2026-352340 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72659 fkie_cve-2026-72659 2026-10-03T09:15:01.687949+00:00

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding only low-privileged access is not correctly validated before use. Processing the request causes unbounded memory growth in the Kibana process, which is terminated by the host once available memory is exhausted. Kibana then becomes unavailable to all users until the service is restarted.

 https://cve.radiocsirt.org/vuln/ghsa-g48r-38gh-835c GHSA-g48r-38gh-835c 2026-10-03T09:15:01.688000+00:00

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A specially crafted, malformed payload submitted to a Kibana visualization feature by an authenticated user holding only low-privileged access is not correctly validated before use. Processing the request causes unbounded memory growth in the Kibana process, which is terminated by the host once available memory is exhausted. Kibana then becomes unavailable to all users until the service is restarted.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2824 WID-SEC-W-2026-2824 — Kibana: Mehrere Schwachstellen 2026-10-03T09:15:01.688043+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.